Operations grimoire/NTP: Difference between revisions

From Nasqueron Agora
Created page with "NTP allows to sync time. That's especially important for accurate logs and TLS certificates. == Recommended NTP servers == There is a CC list of servers by country. France makes sense for most servers to use the country of the datacenter where the server is located. == By OS == NTP is configured in core. === FreeBSD === We use ntpd service. Each day, drift from NTP servers is checked by periodic <code>480.status-ntpd</code>. === Linux === Chrony service is used. ==..."
 
Line 16: Line 16:
=== Update leap seconds ===
=== Update leap seconds ===
Leap seconds file isn't maintained any more by NTP package (see [https://bugs.ntp.org/show_bug.cgi?id=3898 upstream issue])
Leap seconds file isn't maintained any more by NTP package (see [https://bugs.ntp.org/show_bug.cgi?id=3898 upstream issue])
=== ntpq: read: Connection refused ===
Reported as {{T|2192}. The ntpq command queries a specific NTP server, here localhost:123. If the connection can't be established, it probably means ntpd service isn't started.
NTP status:
ntpq: read: Connection refused
Solution: <code>service ntpd start</code>


== References ==
== References ==

Revision as of 09:16, 27 November 2025

NTP allows to sync time. That's especially important for accurate logs and TLS certificates.

There is a CC list of servers by country. France makes sense for most servers to use the country of the datacenter where the server is located.

By OS

NTP is configured in core.

FreeBSD

We use ntpd service. Each day, drift from NTP servers is checked by periodic 480.status-ntpd.

Linux

Chrony service is used.

Troubleshoot

Update leap seconds

Leap seconds file isn't maintained any more by NTP package (see upstream issue)

ntpq: read: Connection refused

Reported as {{T|2192}. The ntpq command queries a specific NTP server, here localhost:123. If the connection can't be established, it probably means ntpd service isn't started.

NTP status: ntpq: read: Connection refused

Solution: service ntpd start

References

NTP
Chrony